id: markitect-namespace-example
system: markitect-tool
caring_profile: caring-0.4.0-rc2
resources:
  - id: knowledge-base:markitect-example
    type: knowledge_base
    labels:
      - internal
    trust_zone: internal
    owner: team:platform-architecture
  - id: repository:markitect-policy
    type: repository
    parent: knowledge-base:markitect-example
    path: repos/markitect-policy
    labels:
      - internal
    trust_zone: internal
    owner: team:platform-architecture
  - id: document:internal-note
    type: document
    parent: repository:markitect-policy
    path: examples/policy/private/internal-note.md
    labels:
      - internal
      - pii
    trust_zone: internal
    owner: team:platform-architecture
    attributes:
      markitect_path: examples/policy/private/internal-note.md
      frontmatter_visibility: internal
      source_revision: rev:example
  - id: section:internal-note#risk
    type: section
    parent: document:internal-note
    path: examples/policy/private/internal-note.md#risk
    labels:
      - internal
    trust_zone: internal
  - id: span:internal-note#risk:customer-email
    type: span
    parent: section:internal-note#risk
    labels:
      - pii
    trust_zone: restricted
    attributes:
      data_classes:
        - email
  - id: context-package:internal-note-review
    type: context_package
    parent: document:internal-note
    labels:
      - internal
      - generated
    trust_zone: internal
    attributes:
      freshness_seconds: 900
      workflow_state: prepared
  - id: workflow-artifact:internal-note-review-run
    type: workflow_artifact
    parent: context-package:internal-note-review
    labels:
      - generated
    trust_zone: internal
    attributes:
      workflow_state: completed
  - id: export:internal-note-review-bundle
    type: export
    parent: workflow-artifact:internal-note-review-run
    labels:
      - export
    trust_zone: external
actions:
  - read
  - query
  - search
  - package
  - activate_context
  - export
  - workflow_run
  - admin
metadata:
  source: examples/markitect/namespace_resource_manifest.yaml
  flex_auth_contract: resource-registration-v0